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(57) Abstract 

A software application (110) is updated to a newer version by 
means of incremental update patches (122). The incremental update 
patches (122) each contain that information necessary to transform 
one version of an application to another version. Any version of 
an application (110) may be upgraded to any other version of the 
application, through the use of a series of incremental update patches 
(122). The appropriate incremental update patches (122) are distributed 
in a multi-tiered manner, such that some update patches (122) update the 
application (110) by only one version, and others update the application 
(110) by several versions. 
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Multi-Tiered Incremental Software Updating 



5 

Background of the Invention 

1 . Field of the Invention 

The present invention relates generally to incremental software updating, and more 
specifically to a system and method for using an automated, multi-tiered approach to 
1 0 performing incremental software updates. 

2. Description of Background Art 

Some computer software publishers update their software "applications" (computer 
programs and data files associated with the programs) frequently. For some types of software 
appUcations, such as virus protection software, these updates are particularly frequent. Virus 

15 protection software applications are designed to detect computer viruses on a computer 
system, and may also remove viruses which are found. An example of such a software 
application is Norton Anti-Virus, published by Symantec Corporation of Cupertino, 
California. Because these virus protection software applications rely on data about specific 
viruses, and new viruses are constantly being written to avoid current virus detection 

20 capabilities, it is necessary to update virus protection software applications on a regular basis 
to account for the newest viruses. Frequent updating of data files is also necessary for some 
database publishers, who must put up-to-date information in their databases, and remove 
obsolete information therefrom. Periodic updating of general software applications to expand 
capabilities and eliminate "bugs" is also common. 

25 Currently, several methods are used to update software applications. The simplest of 

these is to distribute one entire software application to replace an older one. This method, the 
"full update" method, is simple, but expensive and inconvenient. Typically the software is 
distributed on some type of removable media, such as floppy disks or CD-ROMs, which are 
costly to produce and distribute. The time an end user must wait for the removable medium to 

30 arrive and the time it takes for the software application to install itself on a computer system 
are inconvenient. This inconvenience is compounded where updates occur frequently. 
Because of the large size of software applications it is generally not feasible to distribute such 
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updates over computer networks, such as the Internet. When fiill updates are distributed over 
the Internet, they often cause such high loads on servers that other users suffer slow-downs on 
the network, and the servers have trouble meeting the demands. 

In order to bypass many of the problems associated with this type of software updating, 
5 some software publishers distribute "incremental updates." These updates do not contain 
entire software applications, but rather only that information necessary to transform a given 
version of a software apphcation to a newer version. Among the methods available to perform 
such incremental software updating is binary patching, performed by programs such as 
RTPatch, published by Pocket Soft, Inc. A binary patcher replaces only those binary bits of a 

1 0 softAvare application which are different in a newer version. Because most software updates 
involve changes to only a small portion of a software application, a bmary patcher needs, m 
addition to the old software application, only a small data file including the differences 
between the two versions. The smaller data files distributed for a binary patch update are often 
less than 1 % of the size of a full update, taking advantage of the large amount of redundancy 

1 5 in the two versions. 

The use of incremental update methods allows for smaller updates which can be 
distributed by means that are not conducive to the distribution of fiiU updates, such as 
distribution over the Internet. The smaller incremental updates also make distribution by 
floppy disk more feasible where a full update would have required many disks, and an 

20 incremental update may require only one. However, incremental update methods introduce 

another problem: the incremental update is specifically useful for updating only one particular 
version of a software application to another particular version. When updates occur 
frequently, as with virus protection software applications, end users may often update from an 
arbitrarily old version to the newest version, skipping over several previously released 

25 versions. An incremental update for the newest version of a software application will update 
only from the most recent version, however. 

One solution to this problem has been for software publishers to group a number of 
binary patch data files together into one distribution. The user of an arbitrarily old version can 
then apply each incremental update, one at a time, to update to the newest version. However, 

30 the number of incremental updates may be large, due to the fact that the grouping covers a 
large number of versions. The benefits of smaller distributed update files begin to disappear, 
as the size of the grouped-together incremental updates grows. This method of updating 
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applications can also be cumbersome, as a series of update patches need to be selected from 
the group and applied to the software application one after another. 

Another solution to the problem of incremental update version-specificity has been to 
create a unique patch file for transforming every previous version of the application to the 
5 most current version. Some users may not wish to update their software applications to the 
most current version, however, for a number of reasons. Some may be within a corporate 
setting, where an information services department allows updates only to versions it has had a 
chance to test and approve. Others may have older computer systems which do not support the 
increased resource requirements of the newest version of an application. For these reasons, 

10 pubhshers of software updates using this method must generally keep updates available from 
every previous version of an apphcation to a large number of more recent versions. This 
results in a geometrically growing number of update patch files to produce, store and maintain 
for users. In the case of publishers who update their apphcations frequently, such as 
publishers of virus-protection software applications, this may quickly become untenable. 

15 One alternative to the methods described above is the use of ''push" technology, in 

which servers maintain databases of what versions of a softrsvare application each user has. 
The servers then send the necessary updates to each user, as they become available. This 
system requires *'smart" servers, however, to monitor user configurations, determine what each 
user needs, and send the appropriate update information. This results in a server-intensive 

20 system which can cause a drain on server resources comparable to that experienced in the fixll 
update scheme, when many users are simultaneously requesting full updates. 

What is needed is a system for updating software applications from an arbitrary first 
version to an arbitrary second version which does not require a large amount of information to 
be stored and maintained by a software publisher, does not require the user to acquire a large 

25 amount of data to perform such an update, and does not require the use of "smart" servers. 

Summary of the Invention 
The present invention is a method and apparatus for distributing the appropriate 
incremental software update information to users, A software publisher (118) provides update 
patches (122) which will update users' software applications (110) from one state to another. 

30 The update patches (122) are 'tiered.' Update patches on the first tier (200) update from a 

given application state to the subsequent application state. Update patches on the second tier 
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(202) update an application from a given state to the state which is two versions later. The tier 
of an update patch indicates how many individual updates are spanned by the patch. 

By selectively providing tiered update patches, software publishers (118) can facilitate 
quick, efficient updating of users' applications (110) without producing and maintaining large 
5 numbers of update patches (122). These update patches (122) may be provided to users 

simultaneously through a variety of distribution channels (124), since a "smart server" is not 
necessary to provide users with the needed update patches (122). This allows for selective 
redundancy, as update patches (122) which are likely to be needed by many users may be 
made available through more of the available distribution channels (124) than others, 
1 0 providing a robust distribution system. 

Brief Description of the Drawings 
These and other more detailed and specific objects and features of the present invention 
are more fully disclosed in the following specification, reference being had to the 
accompanying drawings, in which: 
1 5 Figure 1 is a block diagram of a first embodiment of the present invention, in which a 

software application 1 10 on a user's computer 1 16 is updated with incremental update patches 
122 from a remote source 118. 

Figure 2 is an illustration of the relation of various tiers of updates to a series of 
application states in the present invention. 
20 Figure 3 is an illustration of an example of the use of multi-tiered incremental updates 

to perform a software application update according to the present invention. 

Figure 4 is an illustration of an example of a sub-optimal software application update 
using incremental updates. 

Figure 5 is an illustration of an example of a publishing schedule for multi-tiered 
25 incremental updates which meets the necessary condition for optimal updates according to the 
present invention. 

Figure 6 is an illustration of an updating program 126 using a catalog 404 to determine 
an appropnate sequential set of update packages 412 based on attributes of an apphcation 1 10. 
Figure 7 is an illustration of an updating program 126 constructing a sorted directory 
30 408 of available catalogs 404 from different sources 400 and 402. 
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Figures 8a and 8b are a flowchart showing how an updating program detemiines what 
update patches need to be apphed to effect an update, and how the updating program carries 
out the updating. 

Detailed Description of the Preferred Embodiments 

In one embodiment, the present invention may be implemented as an update 
mechanism for a virus protection software application. In other embodiments, the present 
invention may be used to update general computer readable files, which may include data files, 
program files, database files, graphics files, or audio files. For illustrative purposes only, the 
invention will be described as embodied in an update mechanism for virus protection software. 

Referring to Figure 1, a virus protection software appUcation 110 which incorporates a 
number of virus detecting routines 112, and utilizes a number of data files containing virus 
information 114, is installed on a user's computer 116. Because of the rate at which new 
viruses are created, it is desirable to update the virus protection software applications on the 
user's computer fi-equently. These updates could take place as often as daily, or even more 
frequently if desired. Generally, these updated applications 110 will include only small 
changes to the data files 114, but sometimes larger changes to the virus detecting routines 112 
will also be included. 

In order to fiilly describe the embodiment of the present invention, it is first 
necessary to describe DeltaPackages, DeltaCatalogs, and DeltaDirectories. 
DeltaPackages 

Each time an updated software application 110 is produced by the vims protection 
software publisher, the updated form of the software application constitutes a new version. 
The software publisher uses an incremental update builder, such as binary patch file builder 
120, to produce at least one incremental update, such as binary patch file 122, which can 
transform a previous version of the software application to the current version. A binary patch 
file builder 120 is a program which takes two versions of a software application, for example 
versions A and B, and produces a binary patch file, 122, which can be used with version A of 
the software application to produce version B. In this example, version A would be the 
"source" state and version B would be the "destination" state of the application. This binary 
patch file 122 can either be an executable file which acts directly on version A of the software 
application, or it can be a data file which is used by a separate binary patch program (not 
shovm) to transform version A of the software application to version B. The binary patch files 
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122 are stored on an update data source 124 (a "server") which makes the patch files 122 
available to an updater program 126 (a "client"). The up dater program 126 determines what 
patch files 122 are necessary, retneves them and applies them to the application to be updated 
110. In the illustrative embodiment, the incremental update files are binary patch files which 
5 are digitally signed compressed executable modules, and the Java ARchive (JAR) platform- 
independent file format, available from Sun Microsystems, is used for this purpose. Because 
they are digitally signed, the authenticity of the updates can be ensured. When executed, the 
incremental update file automatically transforms a software application from a source state to a 
destination state. These self-contained executable incremental update files conforming to the 

10 JAR format are referred to as "DehaPackages" 122, and are one example of what is referred to 
herein as an "update patch'*. 

In Figure 2, a series of application states are given, designated state A through state S. 
Each application state is a software application version which is produced by the software 
publisher later in time than a version with an alphabetically earlier letter designation. The 

1 5 DeltaPackages 1 22 , which are referred to as "tier 1" DeltaPackages 200, are so named because 
they each effect a transition from an application state which is only one version earlier than the 
destination state. There is a tier 1 DeltaPackage 200 for updating to each application state 
other than the initial application state, A. The software publisher may produce higher tier 
DeltaPackages 122, such as ''tier 3" DeltaPackages 202 and "tier 9" DeltaPackages 204. A tier 

20 3 DeltaPackage 202 is used to transform an application from a source state three versions 
earlier than the destination state, and a tier 9 DeltaPackage 204 is used to transform an 
application from a source state nine versions earlier than the destination state. Many other 
tiers of DeltaPackages 122 may be produced, but the benefits of additional tiers must be 
weighed against the costs, described below. In Figure 2, tier 1 DeltaPackages 200 are 

25 produced for each new version, tier 3 DeltaPackages 202 are produced for every third version, 
and tier 9 DeltaPackages 204 are produced for every ninth version. 

For illustrative purposes, each DeltaPackage 122 is given a designation which is "A'* 
followed by two letters. The first letter indicates the application source state upon which the 
DeltaPackage 122 works and the second letter indicates the application destination state 

30 produced. For the case where there are not multiple "flavors" of the apphcation which need to 
be updated in parallel, a relatively simple process is employed to update the application. 
DeltaPackages 122 are applied to a user's software application incrementally, beginning with 
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the highest tier DeltaPackage 122 available which has a source state equal to the current state 
of the apphcation, and a destination state no later than the desired ending state. After the 
DeltaPackage 122 is applied, and the application is updated to the destination state of the 
DeltaPackage 122, another DeltaPackage 122 is chosen in the same manner, with the new 
5 application state providing the source state of the next DeltaPackage 122. This contmues until 
the desired ending state of the application is reached. 

Figure 3 illustrates this procedure for a case in which it is desired to transform an 
apphcation of state F to an application of state T. Following the procedure described above, 
such a transformation is accomplished through only four incremental updates, from F to G to J 

10 to S to T. Each time a new DeltaPackage 122 is to be selected, the one chosen is the highest 
tier DeltaPackage 122 with the current apphcation state as a source state, and a destination 
state which does not exceed the desired ending state. 

When fewer incremental updates are required to perform a given transformation, fewer 
DeltaPackages 122, and therefore less information, needs to be transferred to the application. 

1 5 The procedure described above produces a desired transformation using the smallest number 
of available DeltaPackages 122, as long as one condition is met: no available DeltaPackage 
122 may have a source state which is between the source and destination states of an available 
DeltaPackage 122 with a lower tier. As long as this condition is met, then the procedure 
described above will perform an optimum transformation, using the smallest number of 

20 available DeltaPackages 122 to get from the beginning state to the desired ending state. If the 
condition is not met then the procedure described above may result in a transformation which 
uses more of the available DeltaPackages 122 than necessary. An example of a sub-optimal 
transformation is illustrated in Figure 4. In that case, a transformation from state G to state S 
uses four DeltaPackages 122 (AG J, AJM, AMP and APS), when it need only use three (AGH, 

25 AHI, and AIS). Because the AIS DeltaPackage 122 has a source state (I) which is between the 
source and destination states of a lower tier DeltaPackage (AGJ), the AIS DeltaPackage 122 
violates the above condition, and a sub-optimal set of DeltaPackages 122 is used. In practice, 
a software publisher may easily ensure that the available DeltaPackages 122 meet this 
condition, since each DeltaPackage 122 is produced later in time than DeltaPackages 122 with 

30 earlier destination states. In the above example, before issuing DeltaPackage AIS, the 

publisher would eliminate DeltaPackage AGJ and possibly replace it with another, such as 
DeltaPackage AGI. 



wo 99/4939 1 PCT/US99/0661 9 

In the example of Figure 3, if only the tier 1 DeitaPackages 200 had been available, 
fourteen DeitaPackages 122 would have been required for the transformation, instead of four, 
and much unnecessary information w^ould have been transferred to the application. The total 
number of DeitaPackages 122 which would have been produced by the publisher, however, 
5 would ha\'e been smaller, the higher tier DeitaPackages 122 not having been produced. On the 
other hand, if a tier 14 DeltaPackage 122 designated AFT had been available, only one 
DeltaPackage 122 would have been required, and very little information would have been 
transferred to the user. However, the availabihty of a DeltaPackage 122 which accomplishes 
any particular transformation in one step can be assured only by producing individual 

10 DeitaPackages 122 from every source state to every destination state, which requires a number 
of DeitaPackages 122 approaching N! (where N is the number of file states). Producing and 
maintaining such a large number of individual DeitaPackages 122 is not feasible in many 
situations, as explained above. These considerations must be considered by a software 
publisher in detennining the most efficient DeltaPackage 122 publishing schedule. For the 

15 illustrative embodiment, it was determined that providing DeitaPackages 122 of tiers 1, 3 and 
9 would be most efficient. 

The tiers of DeitaPackages 122 produced do not need to be published according to any 
fixed schedule, but rather may be determined as new updates become available. In Figure 5 an 
irregular publishing schedule of DeitaPackages 122 is shown. There are four separate tiers of 

20 DeitaPackages 122 available with J as a source state. The decision to create so many 

DeitaPackages 122 with the same source state may be based on the fact that many copies of 
the application in the J state are knoAvn to be at large. Many publisher-specific, application- 
specific, and information transport mechanism-specific factors will affect the desirability of a 
publishing schedule for DeitaPackages 122. 

25 DeltaCatalQgs 

Software publishers often produce different "flavors" of a single software application, 
directed to different computer architectures, different operating systems, and users who speak 
different languages. The scheme for publishing incremental updates laid out above is adequate 
for the case in which there is only one flavor of a software application. For the more general 
30 case of several application flavors, however, some additional mechanisms can be used to 
handle the additional complexities of parallel updating. A system which addresses these 
complexities is described in the second illustrative embodiment of the present invention. 
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In the case of virus definition updates, there are often updates which are not operating 
system-specific, and sometimes there are updates which are not even computer architecture- 
specific. Other times, updates are specific to these, and other, categories. A single update 
DehaPackage 122 may be useful to update some flavors of an apphcation, but not others. To 
5 handle these complexities, update catalogs, referred to as "DeltaCatalogs," are utihzed. These 
update catalogs are another example of what are referred to herein as "update patches." Rather 
than having a single DeltaPackage 122 correspond to each incremental update (i.e. "AIS") as 
above, a DeltaCatalog corresponds to each incremental update (i.e. "AIS"). Each DeltaCatalog 
has an associated source state and an associated destination state, and specifies the necessary 

10 update information by specifying which DeltaPackages 122 should be used by each flavor of 
the application to update from the source state to the destination state. In one embodiment, 
DeltaPackages 122 are given unique IDs which do not conform to the *'AAB" format used 
above for illustrative purposes, and are specified by the DeltaCatalogs using these unique IDs. 
With DeltaCatalogs substituted for DeltaPackages 122, the general scheme described above is 

15 utilized. 

There are a number of different ways DeltaCatalogs can be implemented. In this 
embodiment, the Extensible Markup Language (XML) standard is used to create a document 
type definition. The XML standard is available from W3C Publications, World Wide Web 
Consortium, Massachusetts Institute of Technology, Laboratory for Computing Sciences, 

20 NE43-356, 545 Technology Square, Cambridge, MA 02139. An example document type 
definition corresponding to the XML standard, referred to as DPML (for DeltaPackage 
Markup Language), is given in Appendix A. In this document type definition, there are a 
number of types of entries a DeltaCatalog may contain. These types are Product (the type of 
software application). Package (a specific DeltaPackage 122), OS (operating system), CPU 

25 (computer architecture) and Language (the language spoken by the users of the software 

application). An entry of any of these types except Package may in turn contain entries of the 
types Product, Package, OS, CPU or Language. None of the entry types may contain a 
DeltaCatalog, and the Package must contain an "ID" which corresponds to a specific 
DeltaPackage 122. Also, the "to", or destination state, data field and the "from", or source 

30 state, data field must be given for a DeltaCatalog. 

An example of a DeltaCatalog contained in a file written to conform to the XML 
format is given in Appendix B. In the DeltaCatalog file itself, the document type definition for 
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"DPML" is specified by including a uniform resource locator (URL) pointing to the location 
of a current specification of the document type definition. Alternatively, the data type 
definition may be included in the file explicitly, A software application to be updated contains 
the attributes of current state, Product, OS, CPU, and Language, and has access to the desired 
5 ending state of the software apphcation, as described below. In order to determine a sequential 
set of DeltaPackages 122 which need to be apphed to the software application to effect the 
transformation from the current state to the desired ending state, an updating mechanism, 
referred to as a "DeltaUpdater" is used. The DeltaUpdater may be a separate program, or may 
be part of the software application itself. It goes through the same basic procedure outlined 

1 0 above, with DeltaCatalogs taking the place of DeltaPackages 122. The DeltaCatalog of the 
highest tier available which has a "from" field matching the application's current state and 
which has a "to" field which does not exceed the ending state is selected by the DeltaUpdater. 
The DeltaCatalog is then processed, with the DeltaUpdater processing only those sub-entries 
contained within entnes with attributes which match those of the application. An example is 

1 5 illustrated in Figure 6. The DeltaCatalog 404 contains a simpHfied form of the information 
contained in the DeltaCatalog file of Appendix B. Application 110 has the attributes of 
*'NAV version 2.0 running on Windows NT on an alpha computer using North American 
English." The DeltaUpdater 126 would process only Package ID*s "487" and "766," as all 
other Package entries correspond to different attributes. Those DeltaPackages 122 which 

20 correspond to these two IDs would then make up a sequential set 412 of DeltaPackages 122 to 
be apphed to application 110 in the order they were encountered in DeltaCatalog 404. When 
applied to application 110, the DeltaPackages 122 of set 412 transform application 110 fi-om 
state 1 to state 8, the states given in the "from" and "to" fields of DeltaCatalog 404. If the 
desired ending state were still later than state 8, then this procedure would again be applied to 

25 select and process another DeltaCatalog 404, one which has a "fi-om" value of 8. 
DeltaDirectories 

A number of transfer mechanisms are available to a DeltaUpdater for retrieving 
DeltaCatalogs and DeltaPackages 122. Among these are the NNTP Usenet server protocol, 
available fi-om Intemic as "Request For Comments 977"; the HTTP protocol, available fi*om 
30 Intemic as "Request For Comments 1945"; the FTP protocol, available firom Intemic as 

"Request For Comments 959"; and direct access to a "file server" using a protocol such as the 
Universal Naming Convention (UNC). A file server may be, among other things, internal disk 

10 
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media, removable disk media, or a network resource. Other distribution mechanisms are 
currently available and more will likely be available in the future. All that is required of a 
transfer mechanism is that the mechanism be able to supply computer readable data upon 
request. The present invention utihzes so called "dumb media/' meaning that the medium 
5 supplying the requested information need not interact with the DeltaUpdater beyond simply 
supplying requested data. Specifically, "smart servers," such as those used in "push" 
technology, are not necessary. A smart server determines what update information is 
necessar>^ given information about the state of the software application, and then supphes that 
information. The described transfer mechanisms allow DeltaCatalogs and DeltaPackages 122 

10 to be retrieved from "catalog sources" and "update data sources" on which they are stored. 

A typical system embodying the present invention will have available more than one of 
the mentioned transfer mechanisms, as illustrated in Figure 7. A DeltaUpdater 126 will have 
access to a list 403 of locations, specified as URLs, where needed data may be found. In 
general these URLs will specify a number of NNTP news-servers with news-groups, HTTP 

15 servers with directory paths, FTP servers with directory paths, and file servers with directory 
paths. In the embodiment illustrated in Figure 7, an NNTP server 400 and a file server 402 
contain available DeltaCatalogs 404. The flowchart of Figure 8 shows the steps carried out by 
the DeltaUpdater 126. When an update process is begun, the locations specified in list 403 
will be polled 502 in order until one is fotmd which contains the required DehaCatalogs 404. 

20 The DehaUpdater 126 builds a "DeltaDirectory" 408, which is a list of available DeltaCatalogs 
404 at the specified location: For transfer mechanisms which support querying of a file 
directory, such as HTTP, FTP and file servers, the DeltaDirectory 408 is constructed with the 
information returned by such queries. For these transfer mechanisms, the DeltaCatalog 404 
source and destination state information is contained in the name of each DeltaCatalog file. 

25 DeltaCatalogs 404 are named according to a scheme where the first four characters specify a 
source state, the next four characters specify a destination state, and the file extension is "cat." 
For NNTP, the DeltaUpdater 126 retrieves headers for available messages, and looks for 
DeltaCatalog information in the headers. The DehaCatalog information specifies that the 
message is a DeltaCatalog 404, and specifies the source and destination states are for the 

30 DeltaCatalog 404. 

After retrieving the source state and destination state for each available DeltaCatalog 
404, the DeltaUpdater 126 organizes this information in the DeltaDirectory 408 by sorting 504 

11 
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the DeltaCataiogs 404 first by source state, and next by reverse destination state. The 
DehaCatalogs 404 of the preferred transport mechanism are used, if possible. Otherwise. 
DeltaCataiogs 404 of alternate transport mechanisms are used. This ordering of the 
DehaCatalog 404 information allows the DeltaUpdater 126 to move through the 
5 DeltaDirectory 408 efficiently, finding the URL of each DehaCatalog 404 with the necessary 
source state, and the farthest destination state which does not exceed the desired ending state. 
The DehaUpdater 126 determines 506 the current state of the application to be updated, and 
the desired ending state of the application. The apphcation can supply its current state to the 
DeltaUpdater 126, but the DeltaUpdater 126 needs other information to determine the desired 

10 ending state. The method by which the DehaUpdater 126 determines the desire ending state of 
the application is addressed below. 

The sequential set 412 of DeltaPackages 122 is cleared out 508, in preparation for the 
determination of the set 412. The DeltaUpdater 126 moves through the DeltaDirectorv 408 
sequentially in the loop comprising steps 510, 512, and 514 to find the first DehaCatalog 404 

1 5 in the DeltaDirectory 408 which has the current state as a source state. The DehaUpdater 126 
then moves through the DeltaDirectory 408 from this DehaCatalog 404 to find the 
DehaCatalog 404 which has the farthest destination state which is not beyond the desired 
ending state (loop 516, 518, and 520). If all of the DehaCatalogs 404 which have the current 
state as a source state have a destination state which is beyond the desired ending state, then 

20 the update will fail 520. 

When a DehaCatalog 404 is identified at 516 which has a destination state which is not 
beyond the desired ending state, the DehaCatalog 404 is requested 524 from the appropriate 
source 400 or 402. After the requested DehaCatalog 404 is received 526, the DehaCatalog 
404 is processed 528, as described above, to determine an incremental set of DeltaPackages 

25 122 which are appended to the sequential set 412. The current state of the application is then 
set 530 to the destination state of this DehaCatalog 404, and if that state is not the desired 
ending state 532 the processing continues at step 514, and another DehaCatalog 404 is 
determined. 

When the full sequential set of DeltaPackages 122 necessary for an update are 
30 determined 532, the DeltaUpdater 126 requests 534 each needed DeltaPackage 122. The 
DeltaUpdater 126 receives 536 the requested DeltaPackages 122 using the appropriate 
protocol, then uses the digital signature to verify that the DeltaPackages 122 are authentic and 
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have not been altered. Each DeltaPackage 122 retrieved is executed in sequence 538, 
transforming the apphcation from the beginnmg state to the desired endmg state. In other 
embodiments, the DeltaUpdater 126 retrieves all of the DeltaPackages 122 specified by a 
DeltaCatalog 404 before moving on to the next DeltaCatalog 404. 
5 DeltaDirectives 

The beginning state of an application update is determmed by the DehaUpdater with 
reference to the apphcation itself, v^hich will carry some designation of the current state. The 
desired ending state, however, is not necessarily as easy to identify. One possibiht\' would be 
for the DeltaUpdater to simply update the apphcation to the latest state for which 

1 0 DeltaCatalogs are available. In many situations, however, it may not be desirable to the user 
of a software apphcation to update the application to the latest available state. For example, in 
corporate settings, Information Services departments may wish to test out and verify the 
stability of a version of a software application before allowing the applications owned by the 
corporation to be updated to that version. This is often the case when the update is a major 

1 5 revision. Also, some networked computer systems may require that all copies of a particular 
application be at exactly the same state. One solution would be for an Information Services 
department to control the availability of DeltaCatalogs 404. Ahematively, it is desirable in 
some situations to utilize "DeltaDirectives," which are issued in coimection with a given 
computer or network, specifying to which destination state an update is allowed. A 

20 DeltaDirective is a file or NNTP message containing a single value, the allowed destination 
state. The filename or NNTP message header identifies the file or NNTP message as a 
DeltaDirective. The location for such DeltaDirectives is made available to the DeltaUpdater 
before the update procedure is begun. As illustrated in Figure 7, the DeltaUpdater 126 
identifies the latest available DeltaDirective 405 in the prescribed location, obtains the 

25 DeltaDirective 405, and reads the desired ending state from it. This desired ending state is 
used by the DeltaUpdater 126 in steps 506, 516, and 532 of Figure 8. The publisher of the 
updates may make available general DeltaDirectives 405 which specify the latest available 
state. The DeltaUpdater for any given computer may be set to look to the DeltaDirectives 405 
issued by the software publisher or those issued by some other authority, such as an 

30 Information Services department. 

The above description is included to illustrate the operation of the preferred 
embodiments and is not meant to limit the scope of the invention. The scope of the invention 

13 
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is to be iimited only by the following claims. From the above description, many variations 
will be apparent to one skilled in the art that v/ould yet be encompassed by the spirit and scope 
of the present invention. 
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APPENDIX A 

DPML.DTD 

<?XML version="l . 0"?> 
<!DOCTYPE DeltaCatalog [ 

<!ELEMENT DeltaCataiog (Product I Package \ OS | CPU I Language) *> 
<!ATTLIST DeltaCataiog from CDATA #IMPLIED> 
<!ATTLIST DeltaCataiog to CDATA #REQUIRED> 

<! ELEMENT Product [Product ! Package I OS I CPU 1 Language) *> 

<!ATTLIST Product name CDATA #IMPLIED> 

<!ATTLIST Product version CDATA #1MPLIED> 

<!ATTLIST Product ID CDATA #IMPLIED> 

<!ATTLIST Product maxversion CDATA #IMPLIED> 

<!ATTLIST Product minversion CDATA #IMPLIED> 

<! ELEMENT OS {Product I Package I OS I CPU I Language) *> 
<!ATTLIST OS name CDATA #IMPLIED> 
<!ATTLIST OS version CDATA #IMPLIED> 
<!ATTLIST OS maxversion CDATA #IMPLIED> 
<!ATTLIST OS minversion CDATA #IMPLIED> 

<! ELEMENT CPU {Product [ Package | OS I CPU i Language) *> 
<!ATTLIST CPU name CDATA #IMPLIED> 

<iELEMENT Language (Product | Package | OS 1 CPU | Language) *> 
<1ATTLIST Language name CDATA #IMPLIED> 
<!ATTLIST Language locale CDATA #IMPLIED> 

<! ELEMENT Package EMPTY> 

<!ATTLIST Package ID CDATA #REQUIRED> 

]> 



15 



wo 99/49391 



PCT/US99/06619 



APPENDIX B 

CATALOG. CAT 



<?XML version-''l . 0" ?> 

<!DOCTY?E DeltaCai:aiog system ''http://www.symantec.com/DPML.DTD"> 
<DeltaCatalog froir-"l" -co="8"> 

<?roduct name-"NAV" ID-"12345''> 
<OS name="Win95"> 

<Product version="l . 0"> 

<Package ID="1025"> 
</Product> 

<Product version="2 . 0"> 

<Package ID-"1026"> 
</ Product > 

</0S> 

<0S name="WinNT"> 

<Product version="l . 0"> 

< Package ID="1027"> 
</Product> 

<Product version=^"2 . 0"> 
<CPU name-="x86"> 

<OS vesion="3. 51"> 

<Package ID="1100"> 

</0S> 

<OS version="4 . 0"> 

<Package ID="250"> 

</0S> 

</CPU> 

<CPU name="Alpha"> 

<Package ID="487"> 

</CPU> 
</Product> 

</0S> 

<Language name="English" locaie="NorthAmerica"> 

<Package ID-"7 6€"> 
</Language> 

<Language name="French" locale="Canada"> 

<Package ID="4775"> 
</Language> 
</?roduct> 
</DeltaCatalog> 
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1 . A system for transforming a computer readable file of a beginning state to a computer 

readable file of an ending state, where the beginning state and the ending state are both 
5 states within a sequence of states associated with the computer readable file, the system 

comprising: 

at least two update patches, each update patch having a first state and a second state 
associated therewith, the first state and the second state of each update patch 
being states within the sequence of states, the first state of each update patch 

10 preceding in the sequence of states the second state of that update patch, and 

each update patch specifying information about differences between the first 
state and the second state associated with that update patch; 
at least one update data source, each update data source having access to at least one of 
the update patches, each update data source being disposed to receive a request 

1 5 which is associated vAth one of the update patches, for transmitting the update 

patch associated with the request; and 
a client coupled to each update data source and having access to the computer readable 
file, disposed to receive transmitted update patches firom each update data 
source, for determining a sequential set of update patches which specify 

20 information for transforming the computer readable file from the beginning 

state to the ending state. 

2. The system of claim 1, wherein: 

the ending state is specified by a directive file available to the client. 

3. The system of claim 1, wherein: 

25 at least one update data source is selected from the group consisting of an NNTP 

Usenet server, an HTTP server, an FTP server, and a file system server which is 
locally accessible to the client. 

4. The system of claim 1, wherein: 

the update patches are binary patches which include binary differences between the 
30 first state and the second state. 

5. The system of claim 1 , wherein: 
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the sequential set contains that number of update patches which is the smallest number 
of accessible update patches necessary for the chent to transform the computer 
readable file from the beginning state to the ending state. 
6. The system of claim 1, wherein: 
5 each update patch has a tier associated with it, the tier being a number which 

corresponds to the number of states between the first state and the second state 
associated with the update patch; and 
at least one of the update patches has a tier which is different from the tier of another 
update patch. 
10 7. The system of claim 6, wherein: 

the client transmits a request associated with each update patch of the sequential set to 
the update data source which has access to that update patch, receives each 
requested update patch from the update data source which has access to the 
requested update patch, and updates the computer readable file from the 
1 5 beginning state to the ending state with the update patches received; and 

the update patches are binary patches which include binary differences between the 
first state and the second state. 

8. The system of claim 1, wherein: 

the client transmits a request associated with each update patch of the sequential set of 
20 update patches to the update data source which has access to that update patch, 

receives each requested update patch from the update data source which has 
access to the requested update patch, and updates the computer readable file 
from the beginning state to the ending state with the update patches received. 

9. The system of claim 8, wherein: 

25 at least one of the update patches is a catalog which specifies at least one other file 

which specifies information about differences between two states. 

10. The system of claim 9, wherein: 

each catalog has a tier associated with it, the tier being a nimiber which corresponds to 
the nmnber of states between the first state and the second state associated with 
30 the catalog; and 

at least one of the catalogs has a tier which is different from the tier of another catalog, 

11. The system of claim 10, wherein: 

18 
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the ending state is specified by a directive file available to the chent. 
12. The system of claim 8, wherein: 

at least one of the update patches is a catalog which specifies at least one binary patch 
file which includes information about binary differences between two states. 
5 13. The system of claim 12, wherein: 

each catalog has a tier associated with it, the tier being a number which corresponds to 
the number of states between the first state and the second state associated with 
the catalog; and 

at least one of the catalogs has a tier which is different from the tier of another catalog. 
10 14. The system of claim 13, wherein: 

the ending state is specified by a directive file available to the chent. 
15. A computer implemented method for transforming a computer readable file of a beginning 
state to a computer readable file of an ending state using available update patches, the 
beginning state and the ending state both being states within a sequence of states 
15 associated with the computer readable file, each update patch having a first state and a 

second state associated therewith, the first state of each update patch preceding in the 
sequence of states the second state of that update patch, and each update patch 
specifying information about differences between the first state and the second state 
associated with that update patch, the computer implemented method comprising the 
20 steps of: 

determining a sequential set of update patches from those available such that the first 
state associated with the initial update patch in the sequential set of update 
patches is the beginning state, the first state associated with each other update 
patch in the sequential set of update patches is the same state as the second state 
25 associated with the preceding update patch in the sequential set of update 

patches, and the second state associated with the final update patch in the 
sequential set of update patches is the ending state; 
requesting each update patch in the sequential set of update patches from at least one 
update data source, wherein each update data source has access to at least one 
30 of the available update patches, and is disposed to receive the request and 

transmit the requested update patch; 
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receiving each requested update patch in the sequential set of update patches from at 

least one update data source; and 
producing a computer readable file of the ending state by using each update patch in 

the sequential set of update patches to transform the computer readable file 
5 from the first state associated with the update patch to the second state 

associated with the update patch. 

16. The method of claim 15, wherein: 

the ending state is specified by a directive file. 

17. The method of claim 15, wherein: 

10 at least one update data source is selected from the group consisting of an NNTP 

Usenet server, an HTTP server, an FTP server, and a locally accessible file 
system server. 

18. The method of claim 15, wherein: 

the update patches are binary patches which include binary differences between the 
15 first state and the second state. 

19. The method of claim 15, wherein: 

the sequential set of update patches contains that number of update patches which is 
the smallest number of available update patches necessary to transform the 
computer readable file from the beginning state to the ending state. 
20 20. The method of claim 15, wherein: 

the step of determining the sequential set of update patches comprises: 

determining a sequential set of catalogs from available catalogs, each catalog 

specifying at least one update patch; 
interpreting each catalog of the sequential set of catalogs seriatim to determine 
25 an incremental set of update patches associated with the catalog; and 

combining the incremental sets of update patches. 
2 1 . The method of claim 1 5, wherein: 

each update patch has a tier associated with it, the tier being a number which 

corresponds to the number of states between the first state and the second state 
30 associated with the update patch; and 

at least one of the update patches has a tier which is different from the tier of another 
update patch. 

20 
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22. A method of publishing update information for a computer readable file which is 

associated with a sequence of states, the method comprising: 

creating at least two update patches, such that each update patch has a first state and a 
second state associated therewith, the first state and the second state of each 
5 update patch being states within the sequence of states, the first state of each 

update patch preceding in the sequence of states the second state of that update 
patch, and each update patch specifying information about differences between 
the first state and the second state; and 
storing the update patches such that each update patch is accessible to at least one 
1 0 update data source, where each update data source is disposed to receive a 

request associated with one of the update patches and transmit the requested 
update patch. 

23. The method of claim 22, wherein: 

each update patch has a tier associated with it, the tier being a number which 
15 corresponds to the number of states between the first state and the second state 

associated with the update patch; and 
at least one of the update patches has a tier which is different from the tier of another 

update patch. 

24. The method of claim 22, further comprising: 

20 creating at least two catalogs, each catalog specifying at least one update patch; and 

storing the catalogs such that each catalog is accessible by at least one catalog source, 
where the catalog source is disposed to receive a request associated with one of 
the catalogs, and transmit the requested catalog. 

25. A computer readable medium containing a computer program which transforms a 

25 computer readable file of a beginning state to a computer readable file of an ending 

state using available update patches, the beginning state and the ending state both being 
states within a sequence of states associated with the computer readable file, each 
update patch having a first state and a second state associated therewith, the first state 
of each update patch preceding in the sequence of states the second state of that update 

30 patch, each update patch specifying information about differences between the first 

state and the second state associated with that update patch, each update patch having a 
tier associated with it, the tier being a number which corresponds to the number of 

21 
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States between the first state and the second state associated with the update patch, and 
at least one of the update patches has a tier which is different from the tier of another 
update patch, the computer program performing the steps of 

determining a sequential set of update patches from those available such that the first 
state associated with the initial update patch in the sequential set of update 
patches is the beginning state, the first state associated with each other update 
patch in the sequential set of update patches is the same state as the second state 
associated with the preceding update patch in the sequential set of update 
patches, and the second state associated with the final update patch in the 
sequential set of update patches is the ending state; 

requesting each update patch in the sequential set of update patches from at least one 
update data source, wherein each update data source has access to at least one 
of the available update patches, and is disposed to receive the request and 
transmit the requested update patch; 

receiving each requested update patch in the sequential set of update patches from at 
least one update data source; and 

producing a computer readable file of the ending state by using each update patch in 
the sequential set of update patches to transform the computer readable file 
from the first state associated with the update patch to the second state 
associated with the update patch. 
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